CVE-2026-59226
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A vulnerability in Open WebUI versions from 0.9.0 before 0.10.0 allows deactivated users to continue scheduled model execution. The execute_automation function rehydrated automation owners without rechecking their activity status, and check_model_access only enforced private-model grants for the exact user role.
Risk Assessment
The risk is that inactive or suspended users can still execute AI models, potentially leading to unauthorized resource access and violation of organizational security policies.
Recommendation
Immediately upgrade Open WebUI to version 0.10.0 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without rechecking that they were still active or still had features.automations, and check_model_access only enforced private-model grants for the exact user role, allowing deactivated pending users to continue scheduled model execution. This issue is fixed in version 0.10.0.